SSRF with blacklist-based input filter
Laboratorio de Portswigger sobre SSRF
Justice-Reaper
Blind SSRF with out-of-band detection
Laboratorio de Portswigger sobre SSRF
Basic SSRF against another back-end system
Laboratorio de Portswigger sobre SSRF
Basic SSRF against the local server
Laboratorio de Portswigger sobre SSRF
Exploiting XXE via image file upload
Laboratorio de Portswigger sobre XXE
Exploiting XInclude to retrieve files
Laboratorio de Portswigger sobre XXE
Exploiting blind XXE to retrieve data via error messages
Laboratorio de Portswigger sobre XXE
Exploiting blind XXE to exfiltrate data using a malicious external DTD
Laboratorio de Portswigger sobre XXE
Blind XXE with out-of-band interaction via XML parameter entities
Laboratorio de Portswigger sobre XXE
Blind XXE with out-of-band interaction
Laboratorio de Portswigger sobre XXE